Known vulnerabilities in SUSE Linux Enterprise Module for Development Tools 15-SP3 - page 20

Vendor: SUSE
Software: SUSE Linux Enterprise Module for Development Tools
Version: 15-SP3
Software CPE: cpe:2.3:o:suse:suse_linux_enterprise_module_for_development_tools:*:*:*:*:*:*:*:*
Website: https://www.suse.com/
Total vulnerabilities: 493
Public exploits: 35
Known exploited (KEV): 7
Highest CVSSv4 Score: 9.5

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting SUSE Linux Enterprise Module for Development Tools version 15-SP3 SUSE Linux Enterprise Module for Development Tools 15-SP3 is affected by 493 vulnerabilities: 1 critical, 48 high, 147 medium, 297 low Critical High Medium Low

Vulnerabilities (493)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU61721 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2021-33813		 CWE-611 Medium
No
No
 - 29.03.2022 SB2021061628
SB2022032929
SB2022032930
and 39 more
#VU59125 - Out-of-bounds read
CVE-2020-36386		 CWE-125 Low
No
No
 - 30.12.2021 SB2021060729
SB2021123012
SB2021062910
and 7 more
#VU58332 - Use After Free
CVE-2020-36385		 CWE-416 Low
No
No
 - 23.11.2021 SB2021060728
SB2021112323
SB2021112324
and 39 more
#VU57101 - Out-of-bounds write
CVE-2021-37576		 CWE-787 Medium
No
No
 - 06.10.2021 SB2021100617
SB2021100618
SB2021101001
and 42 more
#VU56024 - Resource Management Errors
CVE-2021-33198		 CWE-399 Medium
No
No
 - 22.08.2021 SB2021070405
SB2021082204
SB2021083116
and 46 more
#VU56023 - Missing Authorization
CVE-2021-33197		 CWE-862 Medium
No
No
 - 22.08.2021 SB2021070405
SB2021082204
SB2021083116
and 41 more
#VU56022 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-33195		 CWE-79 Medium
No
No
 - 22.08.2021 SB2021070405
SB2021082204
SB2021083116
and 38 more
#VU56017 - Out-of-bounds write
CVE-2021-22555		 CWE-787 Low
Public exploit available
Exploited
 - 20.08.2021 SB2021070718
SB2021082206
SB2021083120
and 53 more
#VU55665 - Improper Certificate Validation
CVE-2021-34558		 CWE-295 Medium
Public exploit available
No
 - 09.08.2021 SB2021080909
SB2021080912
SB2021081122
and 65 more
#VU55143 - Integer overflow
CVE-2021-33909		 CWE-190 Low
Public exploit available
No
 - 21.07.2021 SB2021072106
SB2021072222
SB2021072223
and 63 more
#VU54854 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2021-35515		 CWE-835 Medium
No
No
 - 14.07.2021 SB2021071408
SB2021080809
SB2021100411
and 23 more
#VU54853 - Resource exhaustion
CVE-2021-36090		 CWE-400 Medium
No
No
 - 14.07.2021 SB2021071408
SB2021080809
SB2021100411
and 70 more
#VU54852 - Resource exhaustion
CVE-2021-35517		 CWE-400 Medium
No
No
 - 14.07.2021 SB2021071408
SB2021080809
SB2021100411
and 33 more
#VU54851 - Resource exhaustion
CVE-2021-35516		 CWE-400 Medium
No
No
 - 14.07.2021 SB2021071408
SB2021080809
SB2021100411
and 21 more
#VU54521 - Resource exhaustion
CVE-2021-33196		 CWE-400 Medium
No
No
 - 04.07.2021 SB2021070405
SB2021070406
SB2021071515
and 37 more
#VU54479 - Improper Verification of Cryptographic Signature
CVE-2021-3421		 CWE-347 Medium
No
No
 - 30.06.2021 SB2021063036
SB2021071302
SB2021072003
and 15 more
#VU54478 - Out-of-bounds read
CVE-2021-20266		 CWE-125 Low
No
No
 - 30.06.2021 SB2021063035
SB2021072003
SB2021111133
and 16 more
#VU54477 - Insufficient Verification of Data Authenticity
CVE-2021-20271		 CWE-345 Medium
No
No
 - 30.06.2021 SB2021063035
SB2021063038
SB2021071302
and 34 more
#VU53579 - Security Features
CVE-2020-26558		 CWE-254 Low
No
No
 - 26.05.2021 SB2021052614
SB2021060801
SB2021061709
and 29 more
#VU51337 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-21300		 CWE-94 High
Public exploit available
Exploited
 - 09.03.2021 SB2021030943
SB2021031217
SB2021031303
and 17 more


Showing elements 381 - 400 out of 493